Legal
Privacy Policy
Last updated: 22 September 2026
At iPropertiesHQ, your privacy is fundamental to how we operate. We collect only the data we genuinely need, we never sell it, and we are fully committed to your rights under the EU General Data Protection Regulation (GDPR) and Spain's Organic Law on Data Protection and Digital Rights (LOPDGDD).
1. Who We Are
The data controller responsible for your personal data is:
Company name: iPropertiesHQ (sole trader / autónomo)
Registered address: Av. Ricardo Soriano 72, 29601 Marbella, Málaga, Spain
Contact: [email protected]
Phone: +34 742 043 395
2. What Data We Collect and Why
We collect personal data only when you actively provide it or when it arises from your use of our website. The table below sets out each category:
| Category | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Enquiry / contact | Name, email, phone, message, budget range | Respond to your property enquiry | Legitimate interest / contract performance (Art. 6(1)(b)(f) GDPR) |
| Private list sign-up | Email address | Send off-market listings and market intelligence | Consent (Art. 6(1)(a) GDPR) |
| Guide download | Name, email | Deliver the requested guide; follow up on your enquiry | Consent (Art. 6(1)(a) GDPR) |
| Website analytics | IP address (anonymised), pages visited, device type | Understand how the site is used; improve performance | Legitimate interest (Art. 6(1)(f) GDPR) |
| Cookie preferences | Cookie consent record | Comply with ePrivacy Directive | Legal obligation (Art. 6(1)(c) GDPR) |
3. How Long We Keep Your Data
- ▸Enquiry data: Retained for 3 years from the date of your last contact, or until you request deletion.
- ▸Private list subscriptions: Until you unsubscribe or withdraw consent.
- ▸Transaction records: 6 years, as required by Spanish commercial law (Código de Comercio).
- ▸Analytics data: 26 months in anonymised form.
4. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:
- ▸Service providers: Our email platform (for newsletters), web hosting provider, and CRM software — all bound by data processing agreements and GDPR-compliant.
- ▸Developers / collaborating agents: Only with your explicit consent when presenting a specific property that requires third-party involvement.
- ▸Legal or regulatory authorities: Where required by Spanish law (e.g. anti-money-laundering obligations under Ley 10/2010).
5. International Transfers
We primarily process your data within the European Economic Area (EEA). Where any service provider is located outside the EEA, we ensure adequate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — before any transfer takes place.
6. Cookies
Our website uses cookies to function correctly and to help us understand how visitors use the site. Cookies are small text files stored on your device.
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential | Session management, CSRF security tokens | No — site will not function without them |
| Analytics | Anonymised traffic statistics | Yes — via cookie banner |
| Marketing | Interest-based advertising (if enabled) | Yes — via cookie banner |
You can manage or withdraw cookie consent at any time using the cookie settings link in the footer.
7. Your Rights Under GDPR
As a data subject, you have the following rights. To exercise any of them, email us at [email protected] with the subject line "Data Request". We will respond within 30 days.
Right of Access (Art. 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16)
Ask us to correct inaccurate or incomplete data.
Right to Erasure (Art. 17)
"Right to be forgotten" — request deletion of your data where we no longer have a lawful basis to hold it.
Right to Restrict Processing (Art. 18)
Ask us to pause processing while a query is resolved.
Right to Data Portability (Art. 20)
Receive your data in a machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interest, including direct marketing.
If you believe we have mishandled your data, you have the right to lodge a complaint with Spain's data protection authority: Agencia Española de Protección de Datos (AEPD).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include encrypted connections (HTTPS/TLS), restricted access controls, and regular security reviews. In the unlikely event of a data breach affecting your rights, we will notify you and the AEPD within 72 hours as required by GDPR Article 33.
9. Third-Party Links
Our website may contain links to third-party sites (including property portals, Google Maps, and social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified via a prominent notice on the homepage. The "last updated" date at the top of this page always reflects the most recent revision.
Questions or requests?
We aim to respond to all data requests within 30 days. You can reach us through any of the channels below.